[rsbac] Válasz: RSBAC and Linux distribution upgrades

[gabor.horvath@konicaminolta.hu]

Hi,

I have just upgraded 3 of our servers running Adamantix (Debian) to stable 
Debian without any problems. And what's more everything happened remotely. 

0. keep a live rescue CD just in case of trouble.
1. switch to a maintenance kernel
2. backup all rsbac attributes with "backup_all 
>rsbac_settings_2005.05.03.sh" (with user root, so doesn't have the 
necessary rights to traverse the entire file system) /in this script file 
names will be used - just have a look at it/
3. upgrade all the packages
4. compile a new rsbac upgraded maint. kernel
5. upgrade rsbac
6. reboot
7. restore your rsbac settings if necessary : "chmod u+rx 
rsbac_settings_2005.05.03.sh; ./rsbac_settings_2005.05.03.sh"
8. compile a non-maint. kernel
9. fine-tune
10. reboot and enjoy

I always test this before large upgrades on a separate test machine (Can 
it be carried out remotely or not (ssh upgrade crash)? Can I expect 
something unexpected?). Up to now I haven't experienced anything special. 
I am sure others can tell you more regarding rsbac upgrade on SuSe. I do 
not use it.

Üdvözlettel / Kind regards

Gábor Horváth
IT Specialist
Konica Minolta Hungary
H-1117 Budapest, 
Galvani u. 4

tel :   +36-1-4649-013
fax:   +36-1-4649-092

mailto:gabor.horvath at konicaminolta.hu
http://www.konicaminolta.hu




Patrique Wolfrum <Patrique.Wolfrum at vwl.uni-freiburg.de>
Feladó: rsbac-bounces at rsbac.org
2005.05.03 11:18
Kérem, válaszoljon ennek a személynek: RSBAC Discussion and Announcements
 
       Címzett:         RSBAC Discussion and Announcements 
<rsbac at rsbac.org>
         Másolat: 
             Tárgy:     [rsbac] RSBAC and Linux distribution upgrades


Hello,

we are using SuSE Linux 8.2 on our faculty server, together with RSBAC
(successful for quite some time :-) ). Since the support from SuSE for
the 8.2 release will not last for long now that the 9.3 release is out
(and two years have passed since the 8.2 release), we have decided to
upgrade to the 9.3 release. In order to minimize my (and those of my
team-colleagues) headaches concerning the upgrade, I have the following
questions:

1. Are there certain, important points that have to be taken into
account (special RSBAC backups, ...) ?
2. Since (AFAIK) RSBAC saves the settings not according to the filename
but to the Inode of the file, how can all the settings be played back in
for the - in the upgrade process - replaced files ?

Thank you very much in advance.

Kind regards.
    Patrique Wolfrum

-- 
Patrique Wolfrum
Administrator - Fakultätsserver

Albert-Ludwigs-Universität Freiburg im Breisgau
Institut für allgemeine Wirtschaftsforschung
Abteilung für Wirtschaftsinformatik
Kollegiengebäude II
Platz der Alten Synagoge
79085 Freiburg

Tel.: 0761 - 203-2397 

_______________________________________________
rsbac mailing list
rsbac at rsbac.org
http://www.rsbac.org/mailman/listinfo/rsbac